/*
 *   Copyright 2021 zzh
 *
 *   Licensed under the Apache License, Version 2.0 (the "License");
 *   you may not use this file except in compliance with the License.
 *   You may obtain a copy of the License at
 *
 *       http://www.apache.org/licenses/LICENSE-2.0
 *
 *   Unless required by applicable law or agreed to in writing, software
 *   distributed under the License is distributed on an "AS IS" BASIS,
 *   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *   See the License for the specific language governing permissions and
 *   limitations under the License.
 *
 */

package com.aduib.boot.common.util;

import com.aduib.boot.common.exception.IoException;

import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;

/**
 * SSL(Secure Sockets Layer 安全套接字协议)相关工具封装
 *
 * @author looly
 */
public class SSLUtil {

  /**
   * 创建{@link SSLContext}
   *
   * @param protocol SSL协议，例如TLS等
   * @param keyManager 密钥管理器,{@code null}表示无
   * @param trustManager 信任管理器, {@code null}表示无
   * @return {@link SSLContext}
   * @throws IoException 包装 GeneralSecurityException异常
   */
  public static SSLContext createSSLContext(
      String protocol, KeyManager keyManager, TrustManager trustManager) throws IoException {
    return createSSLContext(
        protocol,
        keyManager == null ? null : new KeyManager[] {keyManager},
        trustManager == null ? null : new TrustManager[] {trustManager});
  }

  /**
   * 创建和初始化{@link SSLContext}
   *
   * @param protocol SSL协议，例如TLS等
   * @param keyManagers 密钥管理器,{@code null}表示无
   * @param trustManagers 信任管理器, {@code null}表示无
   * @return {@link SSLContext}
   * @throws IoException 包装 GeneralSecurityException异常
   */
  public static SSLContext createSSLContext(
      String protocol, KeyManager[] keyManagers, TrustManager[] trustManagers) throws IoException {
    return SSLContextBuilder.create()
        .setProtocol(protocol)
        .setKeyManagers(keyManagers)
        .setTrustManagers(trustManagers)
        .buildQuietly();
  }
}
